Podatność CVE-2022-28172

Podatność CVE-2022-28172

Publikacja: 2022-06-27

Opis:

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
Med.	Hikvision Remote Code Execution / XSS / SQL Injection	Thurein Soe	02.02.2023

Referencje:

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/

Copyright 2024, cxsecurity.com